mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-02 23:11:48 -09:00
package/bubblewrap: security bump to version 0.13.0
While there are no CVEs for this Bubblewrap release, it includes a fix
to ensure that arguments that receive a path are not empty (which before
treated those as the root directory: a bit of a footgun!), and that is a
follow-up to the security fixes included in 0.12.0.
Additionally, it patches a number of build failures, which fixes e.g.:
https://autobuild.buildroot.org/results/2eb2d222daaadc2eb16b42fa2ec102ab0689f038
https://autobuild.buildroot.org/results/674413f089ce9b80a59058674b3ef6879e1d389c
Release notes:
https://github.com/containers/bubblewrap/releases/tag/v0.13.0
Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 0867818a73)
Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
This commit is contained in:
committed by
Raphaël Mélotte
parent
ad6468b543
commit
52c50abcd0
@@ -1,5 +1,5 @@
|
||||
# From https://github.com/containers/bubblewrap/releases/download/v0.12.0/bubblewrap-0.12.0.tar.xz.sha256sum
|
||||
sha256 9760d007363e3abba7c747489910f9f82d9fca53ba3bd3282e396fa3c97a3314 bubblewrap-0.12.0.tar.xz
|
||||
# From https://github.com/containers/bubblewrap/releases/tag/v0.13.0
|
||||
sha256 4734237473c0e5d695e4e9034a34e43b2dbf5164655bd13fa59ae376b2b7a765 bubblewrap-0.13.0.tar.xz
|
||||
|
||||
# Hash for license files:
|
||||
sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
#
|
||||
################################################################################
|
||||
|
||||
BUBBLEWRAP_VERSION = 0.12.0
|
||||
BUBBLEWRAP_VERSION = 0.13.0
|
||||
BUBBLEWRAP_SITE = https://github.com/containers/bubblewrap/releases/download/v$(BUBBLEWRAP_VERSION)
|
||||
BUBBLEWRAP_SOURCE = bubblewrap-$(BUBBLEWRAP_VERSION).tar.xz
|
||||
BUBBLEWRAP_DEPENDENCIES = host-pkgconf libcap
|
||||
|
||||
Reference in New Issue
Block a user